Trust

What "non-custodial" means, technically

RangeOwl never holds your funds or your keys. There is no RangeOwl vault, no contract of ours that takes deposits, and nothing of yours sitting on our side of a wall — so there is nothing we could lose, freeze, or run off with. Your position stays in your wallet the entire time.

The product has two halves. The analytics are pure reads: your position NFTs, pool state, and transaction history — the same public data anyone can pull from a block explorer. You can use all of it without connecting a wallet at all; paste any address and look.

The actions build a transaction and hand it to you. Collecting fees, claiming rewards, staking, depositing, withdrawing, creating a position and compounding are all things you could do on Uniswap's or Aerodrome's own site — RangeOwl just assembles the call so you don't have to. Every one of them goes to the DEX's own audited contracts, never to a contract we control, and every one stops dead until you approve it in your own wallet. We cannot sign for you, cannot submit anything without you, and cannot alter what you signed after the fact.

Token approvals — we do ask for these, and here's the rule

Adding tokens to a position means the DEX's position manager has to move them out of your wallet, and that requires an approval. An approval is permission for a specific contract to spend a specific amount of one token. If you deposit, you will see one or two of these before the deposit itself.

We always request an exact amount — never "unlimited". Most apps ask for unlimited because it is cheaper and they only have to ask once. We don't, because an unlimited approval outlives the transaction that asked for it: it sits on your wallet indefinitely, and a future exploit in the spender reaches everything you hold of that token. Ours covers that one deposit and is used up by it.

So the check is simple. An approval request from RangeOwl is always for a specific amount you recognise, and the spender is always the DEX's own position manager or router — never an address we control. If you are ever shown an unlimited approval, or a spender that isn't one of those, it isn't us. Close it.

What you sign at sign-in

Sign-in uses Sign-In with Ethereum (SIWE): your wallet signs a plain-text message containing the site domain (rangeowl.xyz), your address, and a one-time random nonce. That signature proves you control the wallet — nothing more. It is not a transaction, costs no gas, touches no funds, and grants no permissions. Signing it is like showing ID, not handing over keys.

Payments

Pro and tax-export purchases are one-shot payments to our access contract on Base. The transaction you sign sends the listed amount of ETH — it does not create an allowance, token approval, or any ongoing permission (re-upping is a fresh one-shot payment each time). You can read the verified contract yourself before buying: it's on Basescan ↗.

What changed, and what didn't

An earlier version of this page said RangeOwl was read-only and would never request a token approval. That was true when it was written. In August 2026 we added the optional actions described above, so it stopped being true, and this page says so now.

What did not change is the part that actually protects you: we still never hold your funds or your keys, there is still no RangeOwl contract with custody of anything, you still sign every transaction yourself, and the approvals we ask for are still exact-amount and single-use. The actions are opt-in — the analytics work exactly as before if you never touch them. If any of that ever changes, this page changes first.